Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: jgRrL1/+E30rCDh1hYa/exzZ4y3LiCVBKqQkmy09VUc=
Subject key identifier: F8:D6:68:C5:33:07:0C:D9:4A:D4:8E:8A:92:8C:F4:C3:13:AD:60:87
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 01964CA2A0C6817ED1C5C67A25C959756B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 06:00:48 +0000
Manifest this update: Sat 19 Apr 2025 06:00:48 +0000
Manifest next update: Sun 20 Apr 2025 06:00:48 +0000
Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: u0jPjIIDccGbslMiCkKmPawxxLsJOFJ1xpmu9ygY/k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:a0:c6:81:7e:d1:c5:c6:7a:25:c9:59:75:6b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Apr 19 06:00:48 2025 GMT
Not After : Apr 20 06:00:48 2025 GMT
Subject: CN=f8d668c533070cd94ad48e8a928cf4c313ad6087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:7b:98:1a:9a:67:c0:d1:be:35:48:dd:41:
30:e4:6d:d3:f1:e9:ff:ae:36:52:86:91:60:82:bc:
48:57:2b:05:89:42:53:ef:4c:8b:87:92:d6:2b:b4:
5c:c0:da:40:87:80:46:f8:a9:27:7a:00:ea:3a:65:
43:67:2d:f0:37:ef:9b:dc:da:f7:fd:09:da:74:a2:
28:62:51:f4:1d:e0:86:04:a8:fd:b1:fc:7c:4a:90:
c6:a9:23:9e:6a:cf:c3:f5:b2:b6:2f:51:d0:52:0d:
12:d0:5b:14:af:8f:61:6c:79:3d:c6:fc:f9:50:af:
1d:c6:fa:10:5b:5b:8a:4b:1c:df:a8:da:14:a8:97:
68:0b:82:35:be:e4:1e:17:25:f3:4d:cb:10:0b:89:
ac:6f:80:fe:1d:bf:39:f0:0e:c1:80:49:68:c5:eb:
3f:82:f5:28:90:a0:15:c9:fa:f7:c5:83:ab:6c:12:
dc:39:9a:3a:e2:a0:a5:3c:25:19:3c:0a:5d:29:5d:
a3:31:ca:ff:8b:e2:b5:97:b9:e1:4e:59:91:46:a6:
d5:9e:fe:e2:16:c0:14:84:78:36:7d:f8:c8:9f:c6:
03:06:c1:79:27:d0:75:51:20:05:40:79:33:79:ec:
a9:26:d7:7e:49:ba:52:57:f9:02:e6:64:ac:74:f4:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:68:C5:33:07:0C:D9:4A:D4:8E:8A:92:8C:F4:C3:13:AD:60:87
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b7:3a:46:f5:4b:7b:c4:d8:a2:3b:76:30:f2:c7:11:ef:6f:
85:74:90:17:f1:2a:cf:3a:fe:8f:43:6c:95:ff:a8:ae:ef:65:
48:d4:f6:05:61:01:c6:ec:55:81:fe:38:db:68:de:65:d2:30:
73:8a:86:13:85:d8:0f:e4:12:5e:91:f6:5a:63:33:72:f3:69:
f8:9e:60:f6:be:17:12:f8:f4:3b:61:60:88:07:0a:b5:cf:50:
b1:7e:94:64:42:2c:01:07:51:94:13:de:71:4e:d0:56:96:d4:
8d:ca:30:18:ef:c4:8d:33:f9:e1:c2:44:74:01:2c:04:87:66:
62:62:d9:06:94:bf:7c:60:14:eb:8c:8d:9d:49:a9:7a:db:e0:
70:e8:ca:49:11:d7:a2:01:c2:01:e6:70:59:55:41:7e:10:cc:
3a:c1:04:a4:27:b5:13:df:7f:b8:59:fb:59:b3:6f:6b:5f:f9:
dd:c2:8a:53:3f:40:9c:f8:ec:e7:ba:c6:74:51:1e:5f:6c:45:
2e:c6:7a:00:f7:59:04:a0:b3:ff:95:9b:8d:b9:aa:87:c6:24:
c7:db:d3:02:c6:de:e3:72:f0:85:d0:23:c6:82:50:f0:d5:81:
b0:50:14:c1:40:3c:6f:f4:21:97:2d:af:81:b9:9c:c6:c6:c0:
c7:5f:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:17:48 2025 by rpki-client